Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWikiplatform Other Vulnerability - CVE-2025-29925 - Vulnerability Database
XWikiplatform

XWikiplatform Other Vulnerability - CVE-2025-29925

Medium
Reference: CVE-2025-29925
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-29925
Title: XWikiplatform Other Vulnerability
Overview:

XWiki Platform is a generic wiki platform. Prior to 15.10.14 16.4.6 and 16.10.0-rc-1 protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn39t have view rights on them. It39s particularly true if the entire wiki is protected with quotPrevent unregistered user to view pagesquot: the endpoint would still list the pages of the wiki though only for the main wiki. The problem has been patched in XWiki 15.10.14 16.4.6 16.10.0RC1. In those versions the endpoint can still be requested but the result is filtered out based on pages rights.